# changelog

author: Open vSwitch CI <ovs-team@redhat.com> - 2.11.3-84
changelog:
  - Merging upstream branch-2.11 [RH gerrit: a4f1272cee]
      Commit list:
      5a62ed8002 dist-docs: Include manpages generated from rST.


author: Open vSwitch CI <ovs-team@redhat.com> - 2.11.3-85
changelog:
  - Merging upstream branch-2.11 [RH gerrit: 4351a9b512]
      Commit list:
      9b0307cf7d Prepare for 2.11.7.
      5d07b5da2e Set release date for 2.11.6.
      018d35b7d9 cirrus: Use FreeBSD 12.2.
      abd7a45765 flow: Support extra padding length.


author: Open vSwitch CI <ovs-team@redhat.com> - 2.11.3-86
changelog:
  - Merging upstream branch-2.11 [RH gerrit: 67070c0625]
      Commit list:
      e9ad1da4f4 Prepare for 2.11.8.
      bbc2705315 Set release date for 2.11.7.
      0f475a5cd4 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified.
      46299c1c72 dpdk: Use DPDK 18.11.11 release.
      65c61b0c23 ofp-actions: Fix use-after-free while decoding RAW_ENCAP.


author: Open vSwitch CI <ovs-team@redhat.com> - 2.11.3-87
changelog:
  - Merging upstream branch-2.11 [RH gerrit: 560df0228c]
      Commit list:
      8710c3e5ce python: Send notifications after the transaction ends.
      bf3ef6a869 Handle refTable values with setkey()


author: Michael Santana <msantana@redhat.com> - 2.11.3-88
changelog:
  - Make changelog in spec file more informative [RH gerrit: 99ad8d96f6]
      This is done by adding the body of the commit message to the changelong.
      The body is indented and has extra spacing separating each entry in the
      changelog to make each one more discernible since now they could be
      longer
      
      Signed-off-by: Michael Santana <msantana@redhat.com>


author: Open vSwitch CI <ovs-team@redhat.com> - 2.11.3-89
changelog:
  - Merging upstream branch-2.11 [RH gerrit: 1d6f0bd658]
      Commit list:
      75907f8a11 ofp-group: Use big-enough buffer in ofputil_format_group().


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.11.3-90
changelog:
  - Merging upstream branch-2.11 [RH gerrit: aac87adaf1]
      Commit list:
      40682157c9 ovsdb-server: Fix memleak when failing to read storage.


author: Michael Santana <msantana@redhat.com> - 2.11.3-91
changelog:
  - pkgtool: Swap bugzilla id and RH git [RH gerrit: d88b628cb0]
      Having the bugzilla ID not at the end of the line breakes another script
      that parses for said ID. This patch fixes that by putting the ID next to
      the new line
      
      Fixes: 99ad8d96f6b9 ("Make changelog in spec file more informative")
      Signed-off-by: Michael Santana <msantana@redhat.com>


author: Michael Santana <msantana@redhat.com> - 2.11.3-92
changelog:
  - Migrate openvswitch to gitlab [RH gerrit: 1791ec21de]
      Signed-off-by: Michael Santana <msantana@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.11.3-93
changelog:
  - Merging upstream branch-2.11 [RH gerrit: 7130895ee1]
      Commit list:
      67adc0141f datapath-windows:adjust Offset when processing packet in POP_VLAN action


author: Eelco Chaudron <echaudro@redhat.com> - 2.12.0-14
changelog:
  - Backport "net/i40e: downgrade error log" (#1792478)
  - Backport "net/i40e: re-program promiscuous mode on VF interface" (#1796586)
  - Backport "bridge: Allow manual notifications about interfaces' updates" (#1792478)
  - Backport "netdev-dpdk: add support for the RTE_ETH_EVENT_INTR_RESET" (#1792478)


author: Eelco Chaudron <echaudro@redhat.com> - 2.12.0-15
changelog:
  - Backport "vhost: add device op when notification to guest is sent" (#1796583)
  - Backport "netdev-dpdk: Add coverage counter to count vhost IRQs" (#1796583)


author: Adrián Moreno <amorenoz@redhat.com> - 2.11.0-18
changelog:
  - Backport "vhost: fix virtqueue not accessible" (#1796590) 
  - Backport "vhost: prevent zero copy mode if IOMMU is on" (#1796590) 
  - Backport "vhost: convert buffer addresses to GPA for logging" (#1796590) 
  - Backport "vhost: translate incoming log address to GPA" (#1796590) 
  - Backport "vhost: fix vring address handling during live migration" (#1796590) 
  - Backport "vhost: add external message handling to the API" (#1796590)


author: Kevin Traynor <ktraynor@redhat.com> - 2.12.0-19
changelog:
  - Detailed packet drop statistics and related patches (#1762725)
  - Backport "netdev-dpdk: Fix not reporting rx_oversize_errors in stats." (#1762725)
  - Backport "netdev-dpdk: Refactor vhost custom stats for extensibility." (#1762725)
  - Backport "netdev-dpdk: Reuse vhost function for dpdk ETH custom stats." (#1762725)
  - Backport "netdev-dpdk: Detailed packet drop statistics." (#1762725)
  - Backport "netdev-dpdk: Fix sw stats perf drop." (#1762725)


author: Maxime Coquelin <maxime.coquelin@redhat.com> - 2.12.0-22
changelog:
  - Backport "vhost: fix vring memory partially mapped" (#1799017)
  - Backport "vhost: protect log address translation in IOTLB update" (#1799017)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-208
changelog:
  - Merging upstream branch-2.13 [RH git: 3825d327a7]
      Commit list:
      bc2dfd7a63 netdev-linux: Fix inability to apply QoS on ports with custom qdiscs. (#2138339)
      b397eb8c8e vswitch.xml: Fix the name of rstp-path-cost option.
      7c9bdf0ba5 bond: Fix crash while logging not yet enabled member.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-209
changelog:
  - Merging upstream branch-2.13 [RH git: 1f57897476]
      Commit list:
      d169aab341 rculist: Fix iteration macros.
      4de22044bb learn: Fix parsing immediate value for a field match.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-210
changelog:
  - Merging upstream branch-2.13 [RH git: 3202b9a8cf]
      Commit list:
      57c76329ef ci: Fix overriding OPTS provided from the yml.
      27987cf63e Prepare for 2.13.11.
      00d74c0ff0 Set release date for 2.13.10.
      9075265056 hash: Fix compilation error on Fedora 34 with GCC 11 and -O0.
      919ac948ec lldp: Fix bugs when parsing malformed AutoAttach.
      23b2d94433 rculist: Use rculist_back_protected to access prev.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-211
changelog:
  - Merging upstream branch-2.13 [RH git: 6116eb6235]
      Commit list:
      301b0a075f dpif: Fix tunnel key set for IPv6 tunnels with SLOW_ACTION.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-212
changelog:
  - Merging upstream branch-2.13 [RH git: 3b57b75f43]
      Commit list:
      581f4a4501 cirrus: Update to use FreeBSD 12.4.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-213
changelog:
  - Merging upstream branch-2.13 [RH git: 368a929412]
      Commit list:
      03bbec4a11 classifier: Fix missing masks on a final stage with ports trie.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.13.0-214
changelog:
  - ofproto-dpif-xlate: Always mask ip proto field. [RH git: 00ef67676c] (#2134873)
      The ofproto layer currently treats nw_proto field as overloaded to mean
      both that a proper nw layer exists, as well as the value contained in
      the header for the nw proto.  However, this is incorrect behavior as
      relevant standards permit that any value, including '0' should be treated
      as a valid value.
      
      Because of this overload, when the ofproto layer builds action list for
      a packet with nw_proto of 0, it won't build the complete action list that
      we expect to be built for the packet.  That will cause a bad behavior
      where all packets passing the datapath will fall into an incomplete
      action set.
      
      The fix here is to unwildcard nw_proto, allowing us to preserve setting
      actions for protocols which we know have support for the actions we
      program.  This means that a traffic which contains nw_proto == 0 cannot
      cause connectivity breakage with other traffic on the link.
      
      Reported-by: David Marchand <dmarchand@redhat.com>
      Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2134873
      Acked-by: Ilya Maximets <i.maximets@ovn.org>
      Signed-off-by: Aaron Conole <aconole@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-215
changelog:
  - Merging upstream branch-2.13 [RH git: 27daa4807a]
      Commit list:
      7fa0106e85 ofproto-dpif-xlate: Always mask ip proto field. (#2134873)
      19497c78dd netdev-windows: Add checking when creating netdev with system type on Windows


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.13.0-216
changelog:
  - Merging upstream branch-2.13 [RH git: 7740aeb78d]
      Commit list:
      43bd4f9e28 Prepare for 2.13.12.
      5d8a8ce490 Set release date for 2.13.11.


author: Mike Pattrick <mpattric@redhat.com> - 2.13.0-217
changelog:
  - Merge branch 'private-mpattric-2213892' into 'fast-datapath-rhel-8' [RH git: 65490d9523]
      ofproto-dpif-xlate: Don't reinstall removed XC_LEARN rule.
      
      See merge request nst/openvswitch/openvswitch2.13!1


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-133
changelog:
  - Merging upstream branch-2.15 [RH git: fc7de3b45a]
      Commit list:
      ef9e3b1c07 cirrus: Update to use FreeBSD 12.4.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-134
changelog:
  - redhat: add a workaround for meson [RH git: d4747588b2]
      Currently, fast-datapath-rhel-8 is aligned to RHEL 8.0, with an
      exception to use a newer meson version.
      
      The problem is that, in the meanwhile, _smp_build_ncpus macros was added
      (and meson macros uses it).
      
      This commit just define, if needed, _smp_build_ncpus by stripping the first 2
      characters (-j) from _smp_mflags that was present in RHEL 8.0.
      
      Signed-off-by: Timothy Redaelli <tredaelli@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-135
changelog:
  - Merging upstream branch-2.15 [RH git: 42c50c7707]
      Commit list:
      ee22ec793d netdev-windows: Add checking when creating netdev with system type on Windows
      a7c572e9a1 classifier: Fix missing masks on a final stage with ports trie.


author: Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-136
changelog:
  - ofproto-dpif-xlate: Always mask ip proto field. [RH git: 38bb09d36c] (#2134873)
      The ofproto layer currently treats nw_proto field as overloaded to mean
      both that a proper nw layer exists, as well as the value contained in
      the header for the nw proto.  However, this is incorrect behavior as
      relevant standards permit that any value, including '0' should be treated
      as a valid value.
      
      Because of this overload, when the ofproto layer builds action list for
      a packet with nw_proto of 0, it won't build the complete action list that
      we expect to be built for the packet.  That will cause a bad behavior
      where all packets passing the datapath will fall into an incomplete
      action set.
      
      The fix here is to unwildcard nw_proto, allowing us to preserve setting
      actions for protocols which we know have support for the actions we
      program.  This means that a traffic which contains nw_proto == 0 cannot
      cause connectivity breakage with other traffic on the link.
      
      Reported-by: David Marchand <dmarchand@redhat.com>
      Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2134873
      Acked-by: Ilya Maximets <i.maximets@ovn.org>
      Signed-off-by: Aaron Conole <aconole@redhat.com>


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-137
changelog:
  - Merging upstream branch-2.15 [RH git: 8fd274f0db]
      Commit list:
      f36509fd64 ofproto-dpif-xlate: Always mask ip proto field. (#2134873)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-138
changelog:
  - Merging upstream branch-2.15 [RH git: f5a699099f]
      Commit list:
      1193a50bc6 Prepare for 2.15.9.
      1548b616bc Set release date for 2.15.8.


author: Mike Pattrick <mpattric@redhat.com> - 2.15.0-139
changelog:
  - Merge branch 'private-mpattric-2213892' into 'fast-datapath-rhel-8' [RH git: 59070cb174]
      ofproto-dpif-xlate: Don't reinstall removed XC_LEARN rule.
      
      See merge request nst/openvswitch/openvswitch2.15!1


author: Maxime Coquelin <maxime.coquelin@redhat.com> - 2.15.0-141
changelog:
  - mcast-snooping: Test per port explicit flooding. [RH git: fc87f38702]
      Various options affect how the mcast snooping module work.
      
      When multicast snooping is enabled and a reporter is known, it is still
      possible to flood associated packets to some other port via the
      mcast-snooping-flood option.
      
      If flooding unregistered traffic is disabled, it is still possible to
      flood multicast traffic too with the mcast-snooping-flood option.
      
      IGMP reports may have to be flooded to some ports explicitly with the
      mcast-snooping-flood-reports option.
      
      Test those parameters.
      
      Acked-by: Paolo Valerio <pvalerio@redhat.com>
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      Acked-by: Eelco Chaudron <echaudro@redhat.com>
      Signed-off-by: Simon Horman <horms@ovn.org>
      
      (cherry picked from commit 4990a9a27177f1fdcb62de1be4969e77e3aea937)
      
      Updated unit tests wrt to nw_frag and igmp handling in flows.
      
      Signed-off-by: David Marchand <david.marchand@redhat.com>


author: Maxime Coquelin <maxime.coquelin@redhat.com> - 2.15.0-142
changelog:
  - mcast-snooping: Flush flood and report ports when deleting interfaces. [RH git: 19a345512a]
      When a configuration change triggers an interface destruction/creation
      (like for example, setting ofport_request), a port object may still be
      referenced as a fport or a rport in the mdb.
      
      Before the fix, when flooding multicast traffic:
      bridge("br0")
      -------------
       0. priority 32768
          NORMAL
           -> forwarding to mcast group port
           >> mcast flood port is unknown, dropping
           -> mcast flood port is input port, dropping
           -> forwarding to mcast flood port
      
      Before the fix, when flooding igmp report traffic:
      bridge("br0")
      -------------
       0. priority 32768
          NORMAL
           >> mcast port is unknown, dropping the report
           -> forwarding report to mcast flagged port
           -> mcast port is input port, dropping the Report
           -> forwarding report to mcast flagged port
      
      Add relevant cleanup and update unit tests.
      
      Fixes: 4fbbf8624868 ("mcast-snooping: Flush ports mdb when VLAN configuration changed.")
      Acked-by: Paolo Valerio <pvalerio@redhat.com>
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      Acked-by: Eelco Chaudron <echaudro@redhat.com>
      Signed-off-by: Simon Horman <horms@ovn.org>
      
      (cherry picked from commit 42c1e2efeda116457b356d0d0b67c36ff0045cc7)
      
      Updated unit tests wrt to nw_frag and igmp handling in flows.
      
      Signed-off-by: David Marchand <david.marchand@redhat.com>
      
      Conflicts:
      	lib/mcast-snooping.c


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-102
changelog:
  - redhat: get the NVR from spec file directly [RH git: fe9ce6cd83]
      Fixes: 339efe77c4c7 ("pkgtool: keep .el8_10 before added bz string")


author: Aaron Conole <aconole@redhat.com> - 2.16.0-103
changelog:
  - netdev-linux: Skip some internal kernel stats gathering. [RH git: ce553c99e2] (#2118848)
      For netdev_linux_update_via_netlink(), hint to the kernel that
      we do not need it to gather netlink internal stats when we want
      to update the netlink flags, as those stats are not rendered
      within OVS.
      
      Background:
      ovs-vswitchd can spend quite a bit of time blocked by the kernel
      during netlink calls, especially systems with many cores. This
      time is dominated by the kernel-side internal stats gathering
      mechanism in netlink, specifically:
        inet6_fill_link_af
          inet6_fill_ifla6_attrs
            __snmp6_fill_stats64
      
      In Linux 4.4+, there exists a hint for netlink requests to not
      trigger the ipv6 stats gathering mechanism, which greatly reduces
      the amount of time that ovs-vswitchd is on CPU.
      
      Testing and Results:
      Tested booting 320 VM's and measuring OVS utilization with perf
      record, then visualized into a flamegraph using a patched version
      of ovs 2.14.2. Calls under bridge_run() seem to get hit the worst
      by this issue.
      
      Before bridge_run() == 11.3% of samples
      After bridge_run() == 3.4% of samples
      
      Note that there are at least two observed netlink calls under
      bridge_run that are still kernel stats heavy after this patch:
      
      Call 1:
        bridge_run -> netdev_run -> route_table_run -> route_table_reset ->
          ovs_router_insert -> ovs_router_insert__ -> get_src_addr ->
            netdev_ger_addr_list -> netdev_linux_get_addr_list -> getifaddrs
      
      Since the actual netlink call is coming from getifaddrs() in glibc,
      fixing would likely involve either duplicating glibc code in ovs
      source or patch glibc.
      
      Call 2:
        bridge_run -> iface_refresh_stats -> netdev_get_stats ->
          netdev_linux_get_stats -> get_stats_via_netlink
      
      This does use netlink based stats; however, it isn't immediately
      clear if just dropping the stats from inet6_fill_link_af would
      impact anything or not. Given this call is more intermittent, its
      of lesser concern.
      
      Acked-by: Greg Smith <gasmith@nutanix.com>
      Signed-off-by: Jon Kohler <jon@nutanix.com>
      Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
      
      Reported-at: https://bugzilla.redhat.com/show_bug.cgi?id=2118848


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-104
changelog:
  - Merging upstream branch-2.16 [RH git: 02276d0fef]
      Commit list:
      91932ecfc1 unaligned: Correct the stats of packet_count and byte_count on Windows.
      f9a04f7e6b tests: Fix filtering of whole-second durations.
      68fc14a3fd github: Update versions of action dependencies.
      3d38056adf Prepare for 2.16.6.
      2b931cd850 Set release date for 2.16.5.
      faeb53076c daemon-unix: Fix file descriptor leak when monitor restarts child.
      fd59944808 vconn: Allow ECONNREFUSED in refuse connection test.
      11cefbb5f6 dpdk: Use DPDK 20.11.6 release.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-105
changelog:
  - Merging upstream branch-2.16 [RH git: f0d9ff1c0c]
      Commit list:
      d28eff1755 netdev-linux: Fix inability to apply QoS on ports with custom qdiscs. (#2138339)
      89e1a2c934 vswitch.xml: Fix the name of rstp-path-cost option.
      df90768de3 bond: Fix crash while logging not yet enabled member.


author: Michael Santana <msantana@redhat.com> - 2.16.0-106
changelog:
  - Merging 5488747abb netdev-offload-dpdk: Enhance the support of.. [RH git: b98298f07b]
      Commit list:
      5488747abb netdev-offload-dpdk: Enhance the support of tunnel pop action
      a77c5f584a ci: Update meson requirement for DPDK.
      
      Resolves conflicts:
       .ci/linux-prepare.sh


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-107
changelog:
  - Merging upstream branch-2.16 [RH git: 16b6203b1f]
      Commit list:
      8ed497f6c1 rculist: Fix iteration macros.
      76c935cbab learn: Fix parsing immediate value for a field match.
      b68533b094 datapath-windows: Check the condition to reset pseudo header checksum on Rx side


author: Timothy Redaelli <tredaelli@redhat.com> - 2.16.0-108
changelog:
  - net/i40e: fix jumbo frame Rx with X722 [RH git: 72e2959a72]
      For NIC I40E_10G-10G_BASE_T_X722, when the port is configured with
      link speed, it cannot receive jumbo frame packets.
      
      Because it set maximum frame size failed when starts the port that
      the port link status is still down.
      
      This patch fix the error that starts the port will force set maximum
      frame size.
      
      Fixes: 2184f7cdeeaa ("net/i40e: fix max frame size config at port level")
      Cc: stable@dpdk.org
      
      Signed-off-by: Jie Wang <jie1x.wang@intel.com>
      Tested-by: Dukai Yuan <dukaix.yuan@intel.com>
      (cherry picked from commit 719469f13b11dbdc921b74258f2d10bd1c5328d4)


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-109
changelog:
  - Merging upstream branch-2.16 [RH git: 53d801289d]
      Commit list:
      679b27378a ci: Fix overriding OPTS provided from the yml.
      d5532f81e0 Prepare for 2.16.7.
      68a258e86b Set release date for 2.16.6.
      b4837701b1 hash: Fix compilation error on Fedora 34 with GCC 11 and -O0.
      70d64054df lldp: Fix bugs when parsing malformed AutoAttach.
      b345daf476 rculist: Use rculist_back_protected to access prev.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-110
changelog:
  - Merging upstream branch-2.16 [RH git: 01d0b688c8]
      Commit list:
      8d9177f6b1 dpif: Fix tunnel key set for IPv6 tunnels with SLOW_ACTION.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.16.0-111
changelog:
  - Merging upstream branch-2.16 [RH git: c5211d025a]
      Commit list:
      ac9cce1afc cirrus: Update to use FreeBSD 12.4.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-167
changelog:
  - Merging upstream branch-2.17 [RH git: b659285425]
      Commit list:
      9d0de176c7 ofproto-dpif-trace: Fix access to an out-of-scope stack memory.
      bd020fba03 hash, jhash: Fix unaligned access to the hash remainder.
      78ea43c71c sparse: Add additional define for sparse on GCC >= 14.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-168
changelog:
  - Merging upstream branch-2.17 [RH git: 3bced0ab82]
      Commit list:
      d1a2af7c33 ovsdb-client: Add missing arg to help for 'dump'.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-169
changelog:
  - Merging upstream branch-2.17 [RH git: b2beb2fa0a]
      Commit list:
      c553026ecd conntrack: Fully initialize conn struct before insertion.
      966ed838e3 conntrack: Do not use {0} to initialize unions.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-170
changelog:
  - Merging upstream branch-2.17 [RH git: 1d74c0f4cf]
      Commit list:
      9468d54d01 compiler: Fix errors in Clang 17 ubsan checks.
      f23b1e500a table: Fix freeing global variable.
      a6f9175aee vlog: Destroy async_append first then close log_fd.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-171
changelog:
  - Merging upstream branch-2.17 [RH git: ab94259ae7]
      Commit list:
      9dc9ad38ba socket: Fix uninitialized values in inet_parse_ functions.
      adc851604e dpctl: Fix uninitialized value when deleting flows.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-172
changelog:
  - Merging upstream branch-2.17 [RH git: 76bb1d3eb3]
      Commit list:
      628ccf2c67 dpdk: Use DPDK 21.11.7 release for OVS 2.17.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-173
changelog:
  - Merging upstream branch-2.17 [RH git: 0ed95d4a07]
      Commit list:
      f924527d97 tests: Fix non-portable plus match in python vlog test.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-174
changelog:
  - Merging upstream branch-2.17 [RH git: 3451661437]
      Commit list:
      3930bc7446 nsh: Add support to compose-packet and use it in system tests.
      ef39373fd1 tests: Convert ND, MPLS and CT sendpkt tests to compose-packet.
      244f90d559 tests: sendpkt: Allow different input formats.
      171398797b ovs-ofctl: Implement compose-packet --bare.
      526044b56d ipf: Handle common case of ipf defragmentation.
      d9465f907e ipf: Only add fragments to batch of same dl_type.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-175
changelog:
  - Merging upstream branch-2.17 [RH git: de853f64c1]
      Commit list:
      f050ccc006 python: idl: Fix index not being updated on row modification.


author: Open vSwitch CI <ovs-ci@redhat.com> - 2.17.0-176
changelog:
  - Merging upstream branch-2.17 [RH git: 6baa043307]
      Commit list:
      1f0344ed01 Prepare for 2.17.11.
      ab673c7a90 Set release date for 2.17.10.


author: Numan Siddique <nusiddiq@redhat.com> - 2.11.1-47
changelog:
  - Backport "northd: By pass IPv6 Router Adv and Router Solicitation packets from ACL stages." (#1848401)
  - Backport "ovsdb idl: Try committing the pending txn in  ovsdb_idl_loop_run."


author: Dumitru Ceara <dceara@redhat.com> - 2.11.1-56
changelog:
  - Backport "pinctrl: Directly update MAC_Bindings created by self originated GARPs." (#1894048)
  - Backport "ovn-northd: Limit self originated ARP/ND broadcast domain. " (#1894048)


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 2.12.0-18
changelog:
  - Backport "Add support to Default Router Preference (PRF) - RFC4191" (#1769849)
  - Backport "Add support for Route Info Option in RA - RFC4191"


author: Numan Siddique <nusiddiq@redhat.com> - 2.12.0-19
changelog:
  - Backport "[RFE] Support for load balancing health checks in OVN" (#1703162)
  - Backport "Stateless NAT support (backported due to conflicts)"


author: Dumitru Ceara <dceara@redhat.com> - 2.12.0-20
changelog:
  - Backport "ovn-controller: Refactor I-P engine_run() tracking." (#1787318)
  - Backport "ovn-controller: Add per node states to I-P engine." (#1787318)
  - Backport "ovn-controller: Add separate I-P engine node for processing ct-zones." (#1787318)
  - Backport "ovn-controller.c: Fix memory leak of local_datapath->ports."
  - Backport "ovn-controller: Fix use of dangling pointers in I-P runtime_data." (#1787318)


author: Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 2.12.0-22
changelog:
  - Backport "pinctrl.c: Fix maybe-uninitialized warnings with old GCC versions" (#1789476)
  - Backport "DNSSL: copy dnssl string in order to avoid truncated value" (#1789476)
  - Backport "RA Route Info Option: copy route info string in order to avoid truncated value" (#1789476)


author: Numan Siddique <nusiddiq@redhat.com> - 2.12.0-23
changelog:
  - Backport "ovn-controller: Don't monitor connection table columns"
  - Backport "Restrict ARP/IPv6 ND replies for LB VIP only on chassis redirect port" (#1788456)


author: Mark Michelson <mmichels@redhat.com> - 2.12.0-24
changelog:
  - Backport "nbctl: Log the source of duplicate IP addresses" (#1794671)
  - Backport "northd: Log all dynamic address assignments" (#1794671)
  - Backport "northd: Load config before processing nbdb contents" (#1794671)


author: Numan Siddique <nusiddiq@redhat.com> - 2.12.0-26
changelog:
  * Backport "[RFE] LB health check : ovn-northd: Consider load balancer active backends in router pipeline" (#1703162)


author: Ilya Maximets <i.maximets@ovn.org> - 22.03.7-5
changelog:
  - github: Reduce ASLR entropy to be compatible with asan in llvm 14.
  [Upstream: ae292a600dbe814a74957fce349cfb37970e34e4]


author: Mohammad Heib <mheib@redhat.com> - 22.03.7-6
changelog:
  - controller: Release container lport when releasing parent port.
  [Upstream: e62b1addc79714bb17624c5ed5f3297b734c8252]


author: Numan Siddique <numans@ovn.org> - 22.03.7-8
changelog:
  - Skip only OVN DNS responder packets from OUT_ACL.
  [Upstream: f22a1ba9c127795bebcfbd41d772bb071f893a6d]


author: Dumitru Ceara <dceara@redhat.com> - 22.03.7-11
changelog:
  - tests: Add missing reset_pcap_file() definition to EDNS test.
  [Upstream: 63de413b8d8687700587f24d787e59cbc43e1007]


author: Roberto Bartzen Acosta <roberto.acosta@luizalabs.com> - 22.09.2-77
changelog:
  - ovn-ic: Fix global blacklist filter for IPv6 addresses.
  [Upstream: f5595f2024b0aa1cce50dc28175203e923167a2a]


author: Dumitru Ceara <dceara@redhat.com> - 22.09.2-78
changelog:
  - pinctrl: dns: Ignore additional records. (#FDP-222)
  [Upstream: b1a995a3f33d077cb436d70c44fc22e7fcaa8188]


author: Dumitru Ceara <dceara@redhat.com> - 22.09.2-79
changelog:
  - northd: Don't skip the unSNAT stage for traffic towards VIPs. (#FDP-291)
  [Upstream: 7e4508916047120f196473cf9965853784fac241]


author: Dumitru Ceara <dceara@redhat.com> - 22.09.2-80
changelog:
  - tests: Skip EDNS test if the scapy version doesn't support it.
  [Upstream: 33f1cac89019aeb363a3304676c7c39612e68632]


author: Frode Nordahl <frode.nordahl@canonical.com> - 22.09.2-81
changelog:
  - controller: Set check_tnl_key for BFD on tunnel ifaces.
  [Upstream: 7a81fcb1916bd68e14ef0e1aed5449c377114379]


author: Ilya Maximets <i.maximets@ovn.org> - 22.09.2-82
changelog:
  - github: Reduce ASLR entropy to be compatible with asan in llvm 14.
  [Upstream: fd8d3757956e09c292ec8ee85397c80dbbcbcb5c]


author: Mohammad Heib <mheib@redhat.com> - 22.09.2-83
changelog:
  - controller: Release container lport when releasing parent port.
  [Upstream: 4fa29ff6f57220b4c5625e99a3e7e6cf87730b5d]


author: Numan Siddique <numans@ovn.org> - 22.09.2-85
changelog:
  - Skip only OVN DNS responder packets from OUT_ACL.
  [Upstream: f7df9b89929639e274e4371cc511fcea9c23ad98]


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2.1.20240819gitc082797f
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: FDP-983
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: FDP-981


